Implement PEP 706 – Filter for tarfile.extractall #102950

Activity

1. encukou

   added

   type-featureA feature request or enhancementA feature request or enhancement

   on Mar 23, 2023
2. encukou

   added 6 commits that reference this issue on Apr 24, 2023

   gh-102950: Implement PEP 706 – Filter for tarfile.extractall (#102953)

   af53046

   pythongh-102950: Adjust tests for systems that don't set the sticky bit

   ...

   4ff2481

   gh-102950: Adjust tarfile filter tests for systems that don't set the…

   ...

   c8c3956

   pythongh-102950: Implement PEP 706 – Filter for tarfile.extractall (p…

   ...

   b52ad18

   pythongh-102950: Adjust tarfile filter tests for systems that don't s…

   ...

   ee503ad

   [3.11] gh-102950: Implement PEP 706 – Filter for tarfile.extractall (G…

   ...

   241f2e5
3. gpshead

   assigned

   encukou

   on May 2, 2023
4. gpshead

   added

   type-securityA security issueA security issue

   on May 2, 2023
5. mcepl commented on May 3, 2023

   

   mcepl

   on May 3, 2023

   Contributor

   More actions

   And I really think #73974 (CVE-2007-4559) should be mentioned somewhere in this PR.
6. mcepl

   added a commit that references this issue on May 3, 2023

   pythongh-102950: Adjust tarfile filter tests for systems that don't s…

   ...

   ae62b3a
7. encukou commented on May 3, 2023

   

   encukou

   on May 3, 2023

   MemberAuthor

   More actions

   Well, the PR was open for a month, but now it's closed. Feel free to suggest an update to the docs.
   Note that Python 3.12 doesn't “fix” CVE-2007-4559 (depending on how you define “fix”).
8. encukou

   added 3 commits that reference this issue on May 10, 2023

   [3.10] gh-102950: Implement PEP 706 – Filter for tarfile.extractall (G…

   ...

   425065b

   pythongh-102950: Adjust tarfile filter tests for systems that don't s…

   ...

   15a108e

   pythongh-102950: Adjust tarfile filter tests for systems that don't s…

   ...

   da07840
9. 34 remaining items

   Load more
10. stratakis

    added a commit that references this issue on Mar 25, 2024

    00397: PEP 706, CVE-2007-4559: Filter API for tarfile.extractall

    ...

    6a2cc1b
11. hroncok

    added a commit that references this issue on Mar 26, 2024

    00397: PEP 706, CVE-2007-4559: Filter API for tarfile.extractall

    ...

    0f9ad4a
12. mcepl

    added 2 commits that reference this issue on Mar 28, 2024

    pythongh-102950: Adjust tarfile filter tests for systems that don't s…

    ...

    ee1fab9

    00397: PEP 706, CVE-2007-4559: Filter API for tarfile.extractall

    ...

    eb20acf
13. icanhasmath

    added a commit that references this issue on Jul 19, 2024

    CVE-2007-4559 Apply fixes pythongh-102950 from community for Python 3.7

    This issue will close once commit b762448 is merged into the '2.7' branch.

    b762448
14. hrnciar

    added a commit that references this issue on Apr 23, 2025

    00397: PEP 706, CVE-2007-4559: Filter API for tarfile.extractall

    ...

    7b25c48
15. rickprice

    added 5 commits that reference this issue on May 7, 2025

    CVE-2007-4559 Apply Fixes pythongh-102950 from community fixes

    This issue will close once commit 9b27013 is merged into the '2.7' branch.

    9b27013

    CVE-2007-4559 Apply Fixes pythongh-102950 from community fixes

    This issue will close once commit 0816c44 is merged into the '2.7' branch.

    0816c44

    CVE-2007-4559 Apply Fixes pythongh-102950 from community fixes

    This issue will close once commit 62cc9e9 is merged into the '2.7' branch.

    62cc9e9

    CVE-2007-4559 Apply Fixes pythongh-102950 from community fixes

    This issue will close once commit faf4c7c is merged into the '2.7' branch.

    faf4c7c

    CVE-2007-4559 Apply Fixes pythongh-102950 from community fixes

    This issue will close once commit 73b95bc is merged into the '2.7' branch.

    73b95bc
16. icanhasmath

    added a commit that references this issue on May 14, 2025

    CVE-2007-4559 Apply Fixes pythongh-102950 from community fixes

    This issue will close once commit 2bfd598 is merged into the '2.7' branch.

    2bfd598
17. hroncok

    added a commit that references this issue on Jul 4, 2025

    00397: PEP 706, CVE-2007-4559: Filter API for tarfile.extractall

    ...

    386fac0
18. frenzymadness

    added a commit that references this issue on Aug 12, 2025

    00397: PEP 706, CVE-2007-4559: Filter API for tarfile.extractall

    ...

    b093c90
19. hroncok

    added a commit that references this issue on Feb 3, 2026

    00397: PEP 706, CVE-2007-4559: Filter API for tarfile.extractall

    ...

    4d4ea62